hello all,
I face a problem when IPS fail all network behind it be not accessible,
so how can I check capability of box to support both
1-hardware bypass.
2-software bypass.
When i Check Logs of My Firewall Policies
i can see it by IP , i want to see it by Username ?
I have External Radius Servers for Authentication Which is integrated with My Domain
Can you help me with needed on the ASA
TSAL-FW01/act# sh run access-groupaccess-group OUTSIDE1_access_in in interface OUTSIDE1access-group OUTSIDE2_access_in in interface OUTSIDE2access-group INSIDE_access_in in interface INSIDEaccess-group TSAL_WAN1_access_in in interface TSAL_WAN1
TSAL...
Good Morning, not sure if this is the right commnunity....anyway.... We are looking for a possibility to allow our User Helpdesk to modify access-lists on our Cisco ASA based client VPN. I'm wondering if it is possible to add a local user to the ASA ...
I see that with the new ASA firewall models, that ASDM can be used for configuration and management of the Firepower Services module. Will the new ASDM work with a 5512-X that will be upgraded to Firepower services from CX. Or will the Firesight Ma...
I have a strange issue with my ASA which running with a code 8.0(5)
I've a simple NAT statement.
nat (monitoring-servers) 1 0.0.0.0 0.0.0.0
global (devices-cpe) 1 interface
which doesn't take effect. NATing is not happening when traffic traverse f...
Hi,
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
As i understood, timeout conn is idle session timeout not a session lifetime. Am I correct?
if so, what are the impacts on system to decrease idle session timeout?
I heard that mo...
Hi, I am bit confused in selecting a Firewall with feature like "High end, Next generation Firewall having back log analysis of 3 months minimum".
Can anyone suggest a model of Cisco providing this feature?
Arshi
There was some penetration test happened and one machine has sent huge logs towards syslog server. Because of which whole bandwidth got choked and SSH access to all servers falling in that VLAN got lost,
Eventually, we had to restart the restart the ...
My ASA 5512-X is ASA 9.4(2). Now I need create 7 VLANs and connect 3 ISP.
VLAN2 (IP Phone) and vlan 3 (for PC) use ISP 1
VLAN4 and 5 (for PC) use ISP2
VLAN6,7,8 (for WiFi) use ISP3
and I need NAT to NAS, FTP,etc
I find this page and something is sa...
Hi
I have an ACS version 5.5 setup with Radius identity stores.
Currently, my wireless users login to a captive portal that sends EAP_ASCII to my ACS which then sends the credentials over to the individual radius identity stores.
I am attempting to ...
I am working with a group that has multiple people managing a group of ASA's. Is there an ASA equivalent to the IOS configuration mode exclusive command? To make it so only one person at a time can be in configuration mode?
Thanks!
-John
Hi guys
Hope you're great, I got a question about something that is happening right now. I already configure some VPN accounts but I'm noticing that if i do nothing the session disconnected me in 1 minute and 37 seconds approximately. About the timeo...
I am trying to sync up a back up device with another company for offsite backups. I'm working with an ASA 5505 and having trouble allowing access to an internal host on ports 22,80,443. My current setup has multiple IPs coming in on the outside inte...
I have several routers, switches and firewalls that send logs to a syslog server without interfering with the console line.
I'm testing an ASA 5506 (running IOS 9.5.2) at a remote location that doesn't have a syslog server so I'm trying to use 'loggi...
